Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: 3TBRZaD7SyqGCX68Dzk+h/G1/+GLpghe5c7NTM7IFrw=
Subject key identifier: 59:80:23:0C:FF:34:A7:6A:BD:12:31:F8:5A:1C:7C:33:AE:94:C7:9A
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019EC0DB9E14C6BB1D714B7DB1463E751CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 18FB
Signing time: Sat 13 Jun 2026 12:01:18 +0000
Manifest this update: Sat 13 Jun 2026 12:01:18 +0000
Manifest next update: Sun 14 Jun 2026 12:01:18 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: NguLDUXm4lZOddMPUrOcG+YQewIqEki8arXYQUqtM98=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:9e:14:c6:bb:1d:71:4b:7d:b1:46:3e:75:1c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jun 13 12:01:18 2026 GMT
Not After : Jun 14 12:01:18 2026 GMT
Subject: CN=5980230cff34a76abd1231f85a1c7c33ae94c79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:86:06:c6:f6:43:f2:9d:03:33:31:4c:d7:
ac:f1:ec:dd:05:9c:8b:ed:e1:0e:c1:32:d0:1a:65:
72:c9:b1:bb:ab:00:53:32:cf:6c:7b:d5:d3:25:60:
eb:00:59:d4:d6:a5:40:e2:f7:16:d4:32:fd:45:06:
86:3b:8e:e3:bc:bb:73:a2:a7:59:f0:9b:cd:eb:4b:
78:03:15:f1:25:df:8d:b2:ec:f3:2f:2d:2c:ff:41:
fd:28:fc:bb:8d:a5:07:be:60:e0:2c:06:74:53:ba:
ca:2c:4d:ac:19:7b:17:16:86:cf:d0:f8:de:f3:58:
1e:70:ae:28:cf:d5:85:75:6c:03:4e:58:bb:b1:8d:
85:87:a2:79:17:9e:2c:d8:4a:8b:88:69:d8:5c:ab:
b8:2b:73:58:a0:08:f3:ec:fb:e0:a3:83:04:be:60:
ec:5e:9c:d9:b5:1c:a0:69:d1:a3:6d:3f:ee:b2:d0:
d9:e9:e8:97:52:0b:16:84:16:28:2f:fc:c4:f0:01:
e0:3b:0c:26:54:9f:da:16:91:e0:5d:ea:18:93:50:
65:f1:bc:da:1b:ef:34:3f:3d:26:5c:fc:ad:5b:b4:
57:11:96:fa:2b:65:b6:7c:90:4c:0d:5c:93:1d:d6:
df:e6:2d:47:0e:be:1d:49:b4:cd:13:ff:31:24:04:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:23:0C:FF:34:A7:6A:BD:12:31:F8:5A:1C:7C:33:AE:94:C7:9A
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:e3:51:02:0c:13:10:f6:9a:69:1e:62:47:0b:7a:bc:fa:
23:dd:ae:5e:e3:2d:af:90:ed:96:cf:83:35:b2:88:56:d8:38:
90:77:69:f8:fd:7d:24:9f:92:64:a5:45:15:a2:e9:2c:61:5f:
b6:8d:09:1b:26:0a:5b:71:ae:df:cd:2c:6c:0f:fd:4c:0d:ff:
b4:ec:59:35:60:23:0e:c8:58:87:37:09:4f:64:9e:a9:de:44:
73:a4:81:0e:fc:fd:28:5f:6f:29:e8:20:49:0b:59:8d:41:b9:
51:9f:77:3a:b8:93:e9:66:4b:75:3e:63:09:a1:4f:b4:a1:e1:
0c:48:62:cb:00:54:a0:a4:35:a7:27:c4:03:28:af:87:36:06:
11:db:d2:47:77:fe:c6:68:6d:e1:e0:27:9b:d0:f2:05:fc:fe:
d5:0b:ee:01:5c:ea:97:09:b5:d5:b6:85:82:90:ba:50:50:bc:
ad:36:5e:b1:91:ec:02:e4:a5:c7:50:e6:82:89:85:16:5c:92:
9d:4f:e5:75:0d:ff:b4:31:e4:00:59:c2:38:54:3d:a9:b8:6d:
63:74:5f:ca:47:64:e0:90:84:c2:64:52:25:5f:5a:67:8a:03:
d6:62:9c:1a:d3:4b:8e:5e:68:13:94:3d:4a:e2:8c:f9:92:71:
a1:e1:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:58:57 2026 by rpki-client